saml: Split statsData array out from statistics logging.

This change makes it easier to add elements to the statistics data
logged when the IdP sends an authentication response.